…and in the “Lovely Irony” department:
One of the symptoms of the Pharma Hack is the addition of files to the folders of your plug-ins.
I’ve been using a plug-in called WordPress File Monitor to help watch for such files. And a few days ago, WordPress File Monitor warned me that several files had been added or modified . . . in the WordPress File Monitor folder!
I did some exploring and found rogue database entries that are another symptom. So I deleted them, then deleted and re-installed the WordPress File Monitor plug-in. Outbreak contained, I think.